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The bases traditionally used for quantum key distribution (QKD) are a or tv/2 polarization 
or alternatively a or n/2 phase measured by interferometry. We introduce a new set of bases, 
i.e. pulses sent in either a frequency or time basis if the pulses are assumed to be transform 
limited. In addition it is discussed how this scheme can be easily generalized from a binary to an A'^- 
dimensional system, i.e., to "quNdits." Optimal pulse distribution and the chances for eavesdropping 
are discussed. 



Quantum key distribution (QKD) was first proposed 
in its present form by Charles H. Bennett and Gilles 
Brassard , and their protocol was subsequently called 
BB84. QKD using the BB84 protocol uses single photon 
pulses traveling between two users to create a common 
encryption key. The sender, commonly called Alice, first 
randomly sends photons in two non-orthogonal basis sets 
while randomly switches between the two bases of each 
non-orthogonal set 0- The receiver, commonly called 
Bob, detects the incoming photons using a random choice 
of basis. Subsequently, polarization encoding phase 
encoding Q , pairs of entangled photons 0, p based on 
EPR paradox and phase shifting !^ was proposed. 
In physical manifestations of BB84 protocol, quantum 
bits, also named qubits, are most commonly represented 
by either the polarization of light or the phase inside 
an optical interferometer. Two non-orthogonal basis sets 
most commonly used are [0,^] and [j, ^], which can 
describes either the angle of polarization or the relative 
phase between two arms of an interferometer. Using po- 
larization or phase limits the number of orthogonal ba- 
sis in each set to two. Moreover, both traditional basis 
sets commonly used, i.e., a polarization basis and an in- 
terference basis (where a phase shift by 0, ^, tt, or ^ 
would replace the polarizations) suffer from limitations 
in optical fiber. Polarization mode dispersion and tem- 
perature sensitivity of the optical fiber makes controlling 
the polarization and phase of single photon pulses over 
long distances difficult. Techniques used to mitigate the 
effect of polarization mode dispersion in optical fiber in- 
cludes the plug-and-play technique citezbin97 and the 
auto-compensation technique . 

This paper proposes a new QKD scheme, which intro- 
duces a new set of bases and utilizes the uncertainty in 
information between time and frequency domain. Single 
photon pulses sent in the time-basis set reside in differ- 
ent overlapping time bins. Similarly, single photon pulses 
sent in the frequency-basis set reside in different overlap- 
ping frequency bins. Alice randomly transmits qubits in 
either of the two basis sets. One advantage to this ap- 
proach is that there is no limit to the number of basis 



used in either the frequency or the time basis. Though 
there are only two basis sets, there can be an arbitrary 
number of time bins or frequency bins in each set. The 
ability to accommodate large number of bases in each set 
allows the implementation of quNdit QKD system. 

In addition, since multiple non-overlapping frequency 
sets can coexists in a larger frequency band, this scheme 
is also suitable for applications in wavelength division 
multiplexed optical networks. 

In the BB84 protocol "0" and "1" are 0° and 90° or 45° 
and 135°, depending on the basis. In the time-frequency 
bases (Fig.^ "0" is a pulse sent at time to, "1" one sent 
at ti if we are in the "time basis." In this case, both 
have the same broad frequency spectrum centered at the 
frequency {vq + J^i)/2. If we are in the frequency basis 
"0" is a pulse centered at i^o, "1" one at i^i, while the 
time-shape of both of these pulses would be the same, 
centered at {to + ti)/2. 
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FIG. 1: (a) Alice sends in "time basis": Two distinguishable 
pulses centered to, ti = to + St and are At broad. The same 
pulse has a broad frequency spectrum, (b) "Frequency basis" : 
Here the roles are of time and frequency are changed, the 
broad time spectrum is centered around (to + ti)/2 and has 
width AT. 



The following table summarizes the binary values and 
the basis used by Alice to send single photons and what 
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Bob measures using his choice of basis sets 
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In order to understand this scheme, it is important to 
keep in mind that only one quantity of the single photon 
pulse can be measured: Quantum mechanics demands 
that the pulse can be measured only either in the fre- 
quency or in the time basis. (The same would be true for 
analogous schemes, e.g., one measures only the frequency, 
but uses pulse shape and phase as the two bases.) 

The probability that Bob measures the wrong value 
even in the right basis is, of course, non-zero: Let's as- 
sume the time-width of the pulses in the time basis is 
At. ("Width" means here the standard deviation.) We 
also define 6t as the time separation between the two 
time bins used in the time basis, AT as the temporal 
width of the pulses sent in the frequency basis, and Sw 
as the spectral width of the pulses sent in the time ba- 
sis. Then the following uncertainty equation governs the 
relationship between each time and frequency element: 
AT ■ Au = Auj ■ At> 1. 

Obviously, in order to not be able to distinguish the 
pulses in the "wrong" basis, 

St < AT. (2) 

The other relations can be understood from the following 
estimates: 

Assume that Alice sends a pulse in the time basis. We 
assume normalized Gaussian pulses. (Note that all pulses 
must have the same area!) If Bob's measurement consists 
of determining whether the pulse arrives before or after 
(^0 + ^i)/2, he measures correctly with the probability 

to+St/2 

-—— / dte-^^ = , 3 

v^At J 2 ' ^ ' 

— oo 

where x = St /2^/2 At and $ is the error function. In 
order to have this probability larger than 99%, x would 
have to be at least 1.65. We call this quantity fidelity. 

Figure 121 shows an experimental setup that can imple- 
ment the time-frequency QKD bases using commercially 
available fiber optic components. The setup in Fig. [3 is 
first divided into Alice, contained in the left box, and 
Bob, contained in the right box. The setup is also di- 
vided into the time basis, contained in the top box, and 



frequency basis, contained in the bottom box. In the 
box on the left, Alice injects photons from a transform- 
limited single photon pulse source into an electro-optic 
switch. The optical switch randomly switches the pho- 
ton between the time basis and the frequency basis. In 
the time basis, the pulse first passes through a band pass 
filter (BPF), and then an optical switch that randomly 
switches the photon between two delay values, around to 
and ti. In the frequency basis, the pulse passes through 
an optical switch that randomly switches the photon be- 
tween two BPF centered at i^q and vi. The output from 
Alice's transmitter in both the time and the frequency 
basis are combined and transmitted to Bob. 
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FIG. 2: The setup of the proposed time-frequency QKD bases. 
The lines in the figure represent optical fibers. OS: Optical 
Switch. BPF: Optical Band Pass Filter; Det.: Single photon 
detectors. 

Once the single photon pulses arrive at Bob, he ran- 
domly detects the photon using either the time basis or 
the frequency basis. In the time basis, the photon enters 
a high resolution time gate that will place photons arriv- 
ing at times t < ^{to + ti) and t > ^(to + ^i) into separate 
optical fiber output ports. In the Frequency Basis, the 
photons enter a high resolution optical spectral filter that 
will place photons with frequencies < ^(I'o + ^^i) Siiid 
V > ^{I'o + t^i) into separate optical fiber output ports. 
Like the original BB84 protocol. Bob records all photons 
detected at each of the four photon detectors but discards 
the photons where Bob and Alice use incompatible bases. 
The photons detected when the same basis are used by 
Alice and Bob will be the ones actually used for encryp- 
tion key distribution. These photons are also known as 
sifted key. 

Security against eavesdropping is strongly based on the 
so-called no-cloning theorem [iflj that makes it impossi- 
ble to copy a qubit. We therefore assume an intercept- 
resend strategy for the eavesdropper (Eve). That is, her 
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best strategy is to intercept photons between Alice and 
Bob, measure them, and resend a photon pulse according 
to what she measured. 

If the Eve measures in the same way as Bob does there 
is no difference to the traditional BB84 protocol. She 
can, however, do something that might be smarter in this 
case. She could just measure only a small slice around 
to and ti, let's say, in the slices to — '^t to to + At, and 
the same around ti. If the pulses in the time basis are 
considerably narrower than the time width of the pulse if 
sent in the frequency basis (i.e. AT), and she measures 
something in, let's say, the to slice, then she can be sure 
enough that it was indeed sent in the time basis as a 
that she can store this information, "0," and send herself 
a time basis pulse centered around to on to Bob. In this 
case the probability that she is wrong is small. Here we 
quantify this train of thought: 

If the pulse was sent in the time basis, the fraction of 
the pulse and therefore the probability for Eve to measure 
the right photon, is 
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where y = AT/\/2At. The probability that she measures 
th wrong photon is 



in the other half she guesses 50% right. The total part 
of the sifted key that Eve gets correctly is thus given by 



e"^ 



(7) 



The second important quantity to be found is the addi- 
tional error she introduces, since that serves as a measure 
for Alice and Bob to detect an eavesdropper. Again, we 
consider the two cases: In the half of the cases where the 
bases coincide. Eve introduces an error when she mea- 
sures the photon wrong, therefore resends it wrong, but 
the Bob measures "correctly" the wrong photon. In the 
other case. Eve resends in the wrong basis, where Bob 
"guesses" the wrong value with probability 1/2. The to- 
tal additional error is thus 



E = 



11 1 (i>(T) 




(8) 
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If, on the other hand, Alice sent a pulse in the frequency 
basis the probability Eve measures a photon at all is pro- 
portional to the overlap of one of her two slices with the 
broad time profile: 
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(6) 



4 ^4y 
— e s — 



where z = AT/ At. 

Assume Eve is sending each "result" she gets to Bob. 
Then there are two questions: (i) Which percentage of 
the key would she get? (ii) What additional percentage 
of error would she introduce into the transmission from 
Alice to Bob? 

The answer to question (i) can be found by considering 
the following: We only have to consider the cases where 
Alice and Bob use the same basis. Then, in half of the 
remaining cases. Eve uses the same basis, too, whereas 



The ratio of the two, R — E/P, can serve as a figure 
of merit, since Alice and Bob try to minimize P while at 
the same time trying to maximize E. 

For a fidelity of 99%, x « 1.65 and z in the range 
between 2 and 3 this ratio would be i? ~ 5, i.e.. Eve 
would get 0.7y of the key correctly, while she introduces 
an additional error of 0.15y. This ratio of i? = 5 has 
to be compared to a ratio of 2 in the case of the tra- 
ditional polarization scheme. The ratio in our case, de- 
pends strongly on the desired fidelity. If we are content, 
e.g., with a fidelity of 90%, the ration R drops to a value 
slightly above 2. Obviously, the broader the slices are 
that Eve measures, the closer she comes towards the ra- 
tio of i? = 2, no matter what the fidelity is. 

The time-frequency basis also lends itself easily to 
generalization to quNdits, i.e., states in iV-dimensional 
Hilbert space. In this case, N possible pulses would be 
centered around to,ti, . . .tjy^i for N different bases in 
the time basis or i^o, ^^i, • ■ • t^N-i for N different frequency 
bins in the frequency basis. Intuitively, the total differ- 
ence between the first and the last pulse should be of 
the same order as the total pulse width in the wrong ba- 
sis (see prove of this statement in 0). For qutrits, the 
pulse scheme is depicted in Fig. 13 

One drawback of this extension in that increasing the 
number of bases will also improve the result of Eve's at- 
tack strategy. The ratio of the likelihoods to measure a 
photon around ti in the right and wrong basis goes down. 



4 



frequency 





FIG. 3: Same as in Fig.0 but for the case of qutrits, where 
a pulse centered around to means "0" , etc. 



since the total pulse areas have to remain constant. Thus 
the ratio R increases linearly with increasing A'^ 

In conclusion, we propose a new quantum key distri- 
bution scheme that is based on the quantum mechanical 
duality between time and frequency. We described an ex- 
perimental implementation of the new scheme using opti- 
cal fiber and discuss the scheme's security against eaves- 
dropping. The extension to an N basis representation of 
quNdits provides the new scheme with an advantage over 
traditional implementations of the BB84 protocol. How- 
ever, this advantage is somewhat mitigated by the fact 
that increasing the number of bases also improves Eve's 
ability to eavesdrop on the key distribution process. 
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